993920a446828bc0e120049d834bf773b4f681d8bb202f36c0c313c2fec2a244 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

993920a446828bc0e120049d834bf773b4f681d8bb202f36c0c313c2fec2a244
Size

195KB
Sample

241018-et4qfszbqj
MD5

1c447663e8073593b337440a1940d9da
SHA1

15195b6f82de7b0bad6885170bb7af1bc062115c
SHA256

993920a446828bc0e120049d834bf773b4f681d8bb202f36c0c313c2fec2a244
SHA512

8a94bcb79bbb4b1a8144b8feb367f3a8cbc3d1b96e6fbbeb73bd23c50a122ebfc078ffd315985f14407269b8b986b6252131e2a917b454462a3ffb305ea7b7da
SSDEEP

6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOh:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXA

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  993920a446828bc0e120049d834bf773b4f681d8bb202f36c0c313c2fec2a244
- Size
  
  195KB
- MD5
  
  1c447663e8073593b337440a1940d9da
- SHA1
  
  15195b6f82de7b0bad6885170bb7af1bc062115c
- SHA256
  
  993920a446828bc0e120049d834bf773b4f681d8bb202f36c0c313c2fec2a244
- SHA512
  
  8a94bcb79bbb4b1a8144b8feb367f3a8cbc3d1b96e6fbbeb73bd23c50a122ebfc078ffd315985f14407269b8b986b6252131e2a917b454462a3ffb305ea7b7da
- SSDEEP
  
  6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOh:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXA
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery